durch
The problem is that the agent itself is the attack surface. An adversary who controls the communication channel can manipulate what the agent believes about who it's talking to, which means anything it holds, its list of authorized actions, a shared secret you gave it, whatever, can be exfiltrated in ways the agent can't detect because the manipulation happens below the layer where it can reason about trust.
Open harnesses and open standards help but they don't close this gap, because the thing you need to trust, the agent's own judgment about its principal, is exactly what gets compromised. The trust chain has to go below software entirely: hardware attestation, signed commands with keys the agent can verify but never access. That's really an OS problem dressed up as an agent architecture problem.
While the agents can generate, they can't exercise that judgement, they can't see nuances and they can't really walk their actions back in a "that's not quite what I meant" sense.
Exercising judgement is where design actually happens, it is iterative, in response to something concrete. The bottleneck isn't just thinking ahead, it's the judgment call when you see the result, its the walking back, as well as thinking forward.
https://github.com/open-horizon-labs/superego is probably the most useful tool we have, but I'm hoping that we can package it and bring it to the people, as it does make all these LLMs orders of magnitude more useful
I will borrow your argument for JTP since it deals with exactly the kind of superficial objections I'm used to seeing everywhere these days, and that don't move the discussion in any meaningful way.
I currently have rely on a sort of supervisor LLM to check and detect if we're drifting, or overcomplicating or similar (https://github.com/open-horizon-labs/superego).
While I still to figure out who watches the watchers, they're are pretty reliable given the constrained mandate they have, and the base model actually (usually) pays attention to the feedback.
What makes exploration valuable is the cycle: act, observe, recognize whether you're closer to what you wanted, then refine. Without that recognition ("closer" or "drifting"), you're exploring blind.
Context is what lets the loop close. You need enough of it to judge the outcome. I think that real shift isn't generators → agents. It's one-shot output → iterative refinement with judgment in the loop.
The bottleneck was never typing. It was judgment. Tailwind is crystallized judgment. AI can consume it endlessly. Producing the next version requires the loop that creates metis, and that loop isn't in the training data.
Thats exactly the approach I took with https://github.com/cloud-atlas-ai/miranda, Telegram bot, PR is the human review point, tests + CodeRabbit catch most issues.
Bot intercepts Claude's AskUserQuestion calls via a hook, sends me an inline keyboard, injects my answer back into the session. Claude keeps working, PR still happens—but I can unblock it from my phone in 5 seconds instead of rejecting a PR based on a wrong guess.
The gap I wanted to fill: when Claude is genuinely uncertain ("JWT or sessions?" "Breaking change or not?"), it either guesses wrong or punts to the PR description where you can't easily respond.
Built a Telegram bot that intercepts Claude's AskUserQuestion calls via a hook, sends me an inline keyboard, injects my answer back into the session. Claude keeps working, PR still happens—but I can unblock it from my phone in 5 seconds instead of rejecting a PR based on a wrong guess.
Works in tandem with a bunch of other LLM enhancers I've built, they're linked in the README or that repo
Show HN: Superego – An AI that watches Claude Code and blocks over-engineering
https://github.com/cloud-atlas-ai/superego
Claude Code will solve your problem. It might also refactor three files, add "future flexibility," and solve two problems you didn't mention. Superego blocks that.It is a Rust CLI that hooks into Claude Code's lifecycle. Before large edits or before Claude finishes, another LLM evaluates the work against one question: is this the simplest thing that actually solves the stated problem?When...
Cassie.fm now supports status pages, and a public status API
Check out my previous Show HN (https://news.ycombinator.com/item?id=42284411) post for more details on the service.
Show HN: Cassie.fm – Uptime monitoring service with a pretty good free tier
https://cassie.fm/api-management/list
Hi HN,I've just redesigned a landing page for Cassie.fm (cassi.fm). An uptime monitoring service I built, its got a pretty awesome free tier, and I would love if I could get some feedback and hopefully pick up a few users :)Why?I run a tiny software shop, and bulk of our work consists of integrating our products (field service management app) on top of various ERPs (local and ancient for the...
I built Cassie.fm (https://cassie.fm) website and API monitoring service.
Why?
I run a tiny software shop, and bulk of our work consists of integrating our products (field service management app) on top of various ERPs (local and ancient for the most part). These ERPs often have APIs tacked on as a afterthought. These go down very often . If the API we integrate with goes down, it looks bad for us since our product does not work, so in order to drive accountability and transparency I hacked together an API monitoring solution. I wanted something that:
- Scales as we add more monitors: Pay only for what you use. No subscriptions. (We're actually paying for our own credits, its a bit weird with accounting but it forced me to do a proper Stripe integration)
- Real-time alerts, sms, email and webhooks, so that we can keep everyone in the loop including our user facing apps.
- Simple, transparent pricing, maybe we decide to invest more heavily in marketing this to our existing clients, and most pricing these days is garbage
What’s Next?
I'm building this to solve a specific business problem for my shop. I like to be driven by actual users, so as adoption grows so will the feature set. Some things I'm considering are analytics, and customisable alerts, response structure checks and schema validation.
Get Started
Register - https://cassie.fm/account/register. You get free 1600 daily credits, no strings attached. Accounts that have no monitors are automatically purged after 30 days, and I promise I won't send you any emails unless you send some first :).
Show HN: Cassie.fm – Web and API monitoring service
We've mostly had trouble explaining to ppl what exactly it is that we're building, which is fine, since we're mostly building for us, but still it seems like something like this would be the killer app for LLMs
Obsidian Canvas UI demo -> https://www.youtube.com/watch?v=1tDIXoXRziA
Also linking out Obsidian plugin repo in case someone wants to dive deeper into what we're about -> https://github.com/cloud-atlas-ai/obsidian-client
Few notable features are:
+ expiration of one minute to one day
+ optional password protection
+ everything stored encrypted
+ deleted as soon as expired.
+ no registration and no limits (until something breaks :))
+ REST API for creation and retrieval
Show HN: Tmp.page – Create public or private temporary web sites
Navigating with Kubernetes, opinionated guide to rolling your own
Show HN: Google Bigtable Postgres FDW in Rust
Show HN: Toks, iOS game of induction, top link will provide 50 promo codes
As Amazon does very little to make searching through these reviews friendly I decided to build something to facilitate getting useful info out of product review data.
There is a short video on the [landing page](http://research.oneiros.cc) you can watch in case below is TL:DR.
The basic idea is that you subscribe to products , the app scrapes reviews from Amazon (.com and .co.uk ATM). The user than has the ability to search through the reviews as well as get some basic breakdowns of words and phrases people use as part of positive or negative reviews (courtesy of a basic lexical analysis).
As this is a sort of `alpha` signup is of course free and fast (no email verification ;)), and due to my puny infra each user is limited to five products.
Anyway all feedback is welcome and extremely appreciated.